
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/8AA7F0EC5E7111ECAD853A46C4F9AE02.roa
File: 8AA7F0EC5E7111ECAD853A46C4F9AE02.roa (raw, json)
Hash identifier: oNRUokVXAfxmQdqkxyz8cTGwG9nv0RtFZmw3j7p3pO8=
Subject key identifier: E9:2F:01:54:74:55:5B:40:5F:6F:B6:E4:C1:9B:9F:4B:76:58:2C:6F
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 6E03
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/8AA7F0EC5E7111ECAD853A46C4F9AE02.roa
Signing time: Fri 02 Oct 2026 15:26:33 +0000
ROA not before: Fri 02 Oct 2026 15:26:33 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 140809
IP address blocks: 103.168.100.0/23 maxlen: 24
2001:df6:d680::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Oct 2026 14:33:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28163 (0x6e03)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Validity
Not Before: Oct 2 15:26:33 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6abfcd29-a6db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:e6:ad:bf:39:c4:54:64:d2:ba:55:e4:b4:fd:
17:88:0b:ae:d2:92:3f:27:7a:38:f8:9c:1f:b5:e1:
03:4e:8a:64:a7:0e:c4:a3:4b:68:bb:fb:e4:9e:b0:
98:0f:9d:a8:82:55:63:1c:2b:3c:50:37:18:ac:4f:
cb:eb:65:33:c0:78:3f:69:87:36:31:d7:8c:34:99:
3d:4b:b8:cb:91:53:c7:fc:9a:1f:d5:de:00:de:59:
1e:7d:17:25:2b:5d:37:26:b0:63:a6:06:dd:ba:7f:
30:46:fb:0f:d5:eb:aa:67:99:cf:c6:24:7f:f4:12:
25:d2:e5:c7:1a:33:92:ce:a8:a9:62:ac:0f:42:b4:
ef:4e:b0:2f:69:c4:81:b3:71:b2:d0:03:fc:dd:08:
23:b7:c3:c1:fa:db:79:04:47:af:55:e7:75:e8:c1:
b7:b0:c9:88:c4:73:c1:ea:ac:61:f6:1b:72:93:8e:
95:f5:bb:45:4d:66:eb:73:71:5e:9d:33:95:95:63:
43:ce:db:bb:97:90:16:ec:0b:0d:74:ab:74:8c:8b:
07:a2:b9:9d:b2:c8:98:7e:6b:bd:fd:3f:f1:e4:1b:
d2:c5:8e:9a:27:94:30:a9:ed:58:dd:1b:df:34:38:
36:52:d7:f9:71:f7:8f:10:e9:aa:37:c5:16:02:2c:
ea:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:2F:01:54:74:55:5B:40:5F:6F:B6:E4:C1:9B:9F:4B:76:58:2C:6F
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/8AA7F0EC5E7111ECAD853A46C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.168.100.0/23
IPv6:
2001:df6:d680::/48
Signature Algorithm: sha256WithRSAEncryption
89:82:1e:65:ff:14:fe:91:45:06:e2:be:0f:90:40:a1:a6:5f:
f8:80:6c:a1:6d:83:2b:b8:24:24:e0:96:8d:78:86:c5:ee:e0:
c9:ff:dc:cb:ce:7e:8a:8e:97:b2:54:cd:3d:b3:75:8f:67:22:
d0:02:89:a1:68:a5:8d:59:cd:3b:22:1f:be:ed:5e:65:e1:d3:
59:62:80:63:ed:02:6b:c1:6e:ed:c9:88:c4:83:1f:6a:b0:59:
12:2e:68:41:f1:a0:4a:2b:d8:05:e8:be:d9:0b:d8:62:62:3d:
0c:72:b0:24:b2:c3:cc:fe:a0:86:97:51:26:0b:ea:c3:cd:e0:
9b:d2:ee:31:60:58:da:19:64:7e:e4:63:21:aa:ee:2e:4c:d5:
e3:47:79:fd:e8:21:7a:d2:24:3c:79:ba:b2:4f:fd:55:8f:c1:
4b:ad:1f:e5:e1:da:cc:e9:2c:97:e9:09:eb:b5:39:31:22:24:
16:e4:91:d2:ec:f5:17:ac:84:30:d4:85:79:d5:e6:f7:c4:85:
e0:b3:69:8e:62:90:4a:6d:c0:52:16:8f:6f:22:27:74:bd:e3:
68:02:f0:f1:66:f9:ef:b4:06:cb:11:e8:a9:04:6a:eb:ff:46:
d5:de:ea:7b:5d:9e:ba:f1:78:62:e5:97:39:5e:40:4c:e3:12:
e0:43:a6:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 03:22:25 2026 by rpki-client